Our team of Information Management professionals are highly skilled and have worked with government departments and private entities, to build privacy compliant foundations.
Information Privacy
- Sensitive Data Register
- Information Classification Policy
- Privacy & Responsible Info Sharing (PRIS)
Information Privacy
Information Privacy
Information Proficiency will collaborate with your organisation to:
- Produce a baseline report and action plan to ensure compliance with Privacy legislation
- Develop an Information Asset Register or Sensitive data map and identify privacy risks to your organisation
- Conduct a legislative review of your enabling, administered and other legislation to identify any interactions with Privacy legislation
- Develop or update a privacy policy
- Develop a data or information breach register, policy, and response plan that fit together with clear lines of responsibility and requirements for mandatory notification
- Develop collection notices to ensure all your points of personal information collection are compliant
- Develop a privacy management plan
- Review information retention and disposal requirements
- Develop internal procedures for handling personal information
- Develop and delivery staff training on PRIS, Information breaches, & Information Classification to ensure your staff are aware of their responsibilities
- Establish automated monitoring and reporting
- Identify and remediate high risk data holdings to reduce the overcollection and storage of personal information within the business
- Conduct Privacy Impact Assessments to evaluate projects and business processes for their compliance with the Commonwealth Privacy Act and the Privacy and Responsible Information Sharing Act
- Develop Privacy Complaints handling policies, procedures and processes
- Prepare guidelines for contractors to meet their obligations under PRIS and protect your agency’s information
Information Asset Register (IAR)
What, Why, Where, Who
An Information Asset Register (IAR) is a tool to help your organisation identify WHAT sensitive data is being collected, WHY it is sensitive, WHERE it is stored, WHO has access, and WHAT is the risk to the business if the information is leaked.
The Information Asset Register identifies vulnerabilities in your organisation’s handling of personal and sensitive information, allowing for the development and implementation of effective and PRIS compliant solutions to protect your information assets.
Our practitioners are experienced with delivering the following:
- Identify what sensitive data and personal information is held across your organisation
- Identify where the sensitive data and information is being held
- Identify information shared with other organisations
- Flag vulnerabilities in your organisations sensitive data practices
- Provide solutions to fix information management vulnerabilities to ensure information is held securely and remains compliant
Contact us on (08) 6230 2213 or email info@infoproficiency.com.au